Re: What is unsecure postgres languages? How to disable them?

Поиск
Список
Период
Сортировка
Искать
От
Tino Wildenhain
Тема
Re: What is unsecure postgres languages? How to disable them?
Дата
Msg-id
4B826CBE.1090706@wildenhain.de
Ответ на
Список
Дерево обсуждения
What is unsecure postgres languages? How to disable them? dipti shah <shahdipti1980@gmail.com>
Re: What is unsecure postgres languages? How to disable them? Tino Wildenhain <tino@wildenhain.de>
Re: What is unsecure postgres languages? How to disable them? "Albe Laurenz" <laurenz.albe@wien.gv.at>
Re: What is unsecure postgres languages? How to disable them? dipti shah <shahdipti1980@gmail.com>
Re: What is unsecure postgres languages? How to disable them? Scott Bailey <artacus@comcast.net>
Hi,

Am 22.02.2010 11:56, schrieb dipti shah:
> Hi,
> Could anyone please tell me what is unsecure postgres languages(like C,
> pgperl, pgpython??). How to disable them or restrict them only for super
> user?

They are already restricted for the super user because of their 
"insecure" nature. That means those languages allow you full access
to the system (and even some innards of postgresql) with the rights
of the postgresql process. You can remove the language handlers:

http://www.postgresql.org/docs/8.1/static/app-droplang.html

If you wish. Apart from that there is no more risk attached to them
unless you are super user or write insecure functions with them
then say with the copy command.

Regards
Tino Wildenhain

В списке pgsql-general по дате отправления
От: Pavel Stehule
Дата:
От: Merlin Moncure
Дата:
FAQ